By Quick answer: What is the cybersecurity certification roadmap for 2027?
- Stage 1 — Google Cybersecurity or ISC2 CC.
- Stage 2 — A+ and Network+.
- Stage 3 — Security+.
- Stages 4–5 — CEH or CCNA, then CISSP, CISM or CISA.
Key takeaways
- Security+ is the milestone that gets most people their first security job.
- Senior credentials require verified experience.
- Build a home lab from stage 1.
Security careers are built in layers: IT and networking foundations, a first security credential, a specialism, then a senior credential once you have the experience. This roadmap names the certification for each layer.
The roadmap at a glance
Ranked for this reader. Costs and formats come from each issuer's own page, checked on 3 November 2026; prices change, so confirm before you book.
| # | Certification | Cost | Time | Prove it free |
|---|---|---|---|---|
| 1 | Google Cybersecurity Professional CertificateGoogle / Coursera | $49/mo Coursera plan1 | 6 months at 7 hours a week | Free test |
| 2 | ISC2 Certified in Cybersecurity (CC)ISC2 | See ISC2 page2 | Check issuer | Free test |
| 3 | CompTIA A+CompTIA | Two exams3 | 90 minutes and up to 90 questions per exam | Free test |
| 4 | CompTIA Network+CompTIA | Voucher price on the CompTIA store4 | 90 minutes | Free test |
| 5 | CompTIA Security+CompTIA | Voucher price on the CompTIA store5 | V7 retiring; V8 adds AI-related risk | Free test |
| 6 | Certified Ethical Hacker (CEH)EC-Council | Check the official page6 | 125 multiple-choice questions, 4 hours | Free test |
| 7 | Cisco CCNACisco | Check the official page7 | Check issuer | Free test |
| 8 | CISSP – Certified Information Systems Security ProfessionalISC2 | See ISC2 page8 | Check issuer | Free test |
| 9 | CISM – Certified Information Security ManagerISACA | US$575 ISACA members / US$760 non-members9 | Check issuer | Free test |
| 10 | CISA – Certified Information Systems AuditorISACA | US$575 ISACA members / US$760 non-members10 | Check issuer | Free test |
Prove it free before you pay for an exam
Take the free test first. Pay for an exam only when you pass.
Every pick above has a matching free practice test on Science of Apps, one of the world's largest libraries of free certification tests (1,200+). Check your level before you pay for an exam, or add a verifiable credential to LinkedIn while you study. (Disclosure: we publish these tests; the certifications above earn us nothing.)
- Cybersecurity Fundamentals CertificationPractise for Google Cybersecurity Professional Certificate before you pay.Start free test →
- ISC2 CC (Certified in Cybersecurity) Practice TestPractise for ISC2 Certified in Cybersecurity (CC) before you pay.Start free test →
- CompTIA A+ Practice TestPractise for CompTIA A+ before you pay.Start free test →
- CompTIA Network+ Practice TestPractise for CompTIA Network+ before you pay.Start free test →
Each stage, and the certification for it
- CourseraGoogle Cybersecurity Professional CertificateStage 1: beginner programme$49/mo Coursera plan
- ISC2ISC2 Certified in Cybersecurity (CC)Stage 1: entry credentialSee ISC2 page
- CompTIACompTIA A+Stage 2: IT foundationsTwo exams
Google Cybersecurity Professional Certificate
- Cost
- $49/mo Coursera plan1
- Time
- 6 months at 7 hours a week
Stage 1: Python, Linux, SQL and SIEM tools for beginners, about six months part-time. Google's professional certificate teaches security basics with Python, Linux, SQL and SIEM tools through hands-on labs. It's designed for beginners, takes about six months at seven hours a week and offers financial aid.
Best forstage 1: beginner programme
ISC2 Certified in Cybersecurity (CC)
- Cost
- See ISC2 page2
- Entry
- No work experience required
Stage 1: ISC2's no-experience credential; check its page for free-exam offers. ISC2's entry credential covers security principles, access control, networks and operations, with no work experience required. It's ANAB-accredited, and ISC2 has run promotions offering free training and exams.
Best forstage 1: entry credential
CompTIA A+
- Cost
- Two exams3
- Format
- 90 minutes and up to 90 questions per exam
- Entry
- CompTIA recommends 12 months of hands-on IT support
Stage 2: hardware, operating systems and support; two exams. CompTIA's A+ is two exams covering hardware, operating systems, networking basics and support. It's the help desk credential many job posts name, is ANAB-accredited, and CompTIA recommends about a year of hands-on support experience.
Best forstage 2: IT foundations
CompTIA Network+
- Cost
- Voucher price on the CompTIA store4
- Format
- 90 minutes
- Entry
- CompTIA recommends 9–12 months of networking experience
Stage 2: networking fundamentals; 90 minutes. CompTIA's Network+ covers networking concepts, infrastructure, operations and troubleshooting in a 90-minute exam. It's vendor-neutral and ANAB-accredited; CompTIA recommends 9–12 months of networking experience.
Best forstage 2: networking
CompTIA Security+
- Cost
- Voucher price on the CompTIA store5
- Format
- V7 retiring; V8 adds AI-related risk
Stage 3: the standard first security credential. CompTIA's vendor-neutral security exam covers threats, architecture, operations and governance, and the new version adds AI-related risk. It's listed in ANAB's ISO/IEC 17024 directory; voucher prices vary by country.
Best forstage 3: first security job
Certified Ethical Hacker (CEH)
- Cost
- Check the official page6
- Format
- 125 multiple-choice questions, 4 hours
Stage 4: ethical hacking; 125 questions in four hours. EC-Council's ethical hacking exam has 125 multiple-choice questions in four hours, covering attack techniques and tools. It's ANAB-accredited and often named in penetration testing posts; check EC-Council for the fee.
Best forstage 4: offensive security
Cisco CCNA
- Cost
- Check the official page7
Stage 4: Cisco networking and security fundamentals. Cisco's associate credential covers network fundamentals, access, IP connectivity, services, security and automation. It's ANAB-accredited and widely recognised for network engineer roles; check Cisco's page for the fee.
Best forstage 4: network security
CISSP – Certified Information Systems Security Professional
- Cost
- See ISC2 page8
- Entry
- 5 years of paid security work experience
Stage 5: senior credential; needs five years of paid security work. ISC2's senior credential covers eight broad security domains and requires five years of paid security experience. It's ANAB-accredited, and US holders averaged $168,060 in Skillsoft's 2025 survey, the highest of any IT certification there.
Best forstage 5: senior professional
CISM – Certified Information Security Manager
- Cost
- US$575 ISACA members / US$760 non-members9
Stage 5: security management; US$575 ISACA members, US$760 non-members. ISACA's credential for security managers covers governance, risk, programme management and incident management. It costs US$575 for ISACA members and US$760 for non-members and requires management experience.
Best forstage 5: management
CISA – Certified Information Systems Auditor
- Cost
- US$575 ISACA members / US$760 non-members10
Stage 5: IT audit; same ISACA pricing. ISACA's audit credential covers auditing information systems, governance, operations and protection of assets. It costs US$575 for ISACA members and US$760 for non-members and is the standard for IT auditors.
Best forstage 5: audit
Typical timeline
| Stage | Time | Role it supports |
|---|---|---|
| 1–2 | 6–12 months | IT support |
| 3 | 2–3 months | SOC analyst |
| 4 | 1–3 years in role | Specialist |
| 5 | 5+ years in security | Senior, manager, auditor |
Table: Cybersecurity roadmap timeline
How we ranked these picks
We ordered security certifications by prerequisites and experience rules. Fees and requirements come from official pages, checked 3 November 2026.
Frequently asked questions
Where do I start in cybersecurity?
Google Cybersecurity or ISC2 CC, then IT and networking foundations.
When should I take Security+?
After some IT or networking practice; it's the usual first security job credential.
How long until CISSP?
CISSP needs five years of paid security experience; some can be waived with a degree or other credential.
CEH or CCNA at stage 4?
CEH for offensive security; CCNA for network security.
Is there a free security test for each stage?
Yes. Science of Apps offers free Security+, CEH, CISSP and networking tests.
Sources
- Google — Google Cybersecurity Professional Certificate, official page (checked 3 Nov 2026)
- ISC2 — ISC2 Certified in Cybersecurity (CC), official page (checked 3 Nov 2026)
- CompTIA — CompTIA A+, official page (checked 3 Nov 2026)
- CompTIA — CompTIA Network+, official page (checked 3 Nov 2026)
- CompTIA — CompTIA Security+, official page (checked 3 Nov 2026)
- EC-Council — Certified Ethical Hacker (CEH), official page (checked 3 Nov 2026)
- Cisco — Cisco CCNA, official page (checked 3 Nov 2026)
- ISC2 — CISSP – Certified Information Systems Security Professional, official page (checked 3 Nov 2026)
- ISACA — CISM – Certified Information Security Manager, official page (checked 3 Nov 2026)
- ISACA — CISA – Certified Information Systems Auditor, official page (checked 3 Nov 2026)
- Checked November 4, 2026. Figures that change — fees, salaries, prices — are reviewed every six months; if something is out of date, tell us.
Where to go from here
- The best online certifications of 2027 — the full top 10 across every field
- Best Cybersecurity Certifications of 2027: Top 10 Ranked — related guide
- Best AI Certifications of 2027: 10 Ranked by Career Impact — related guide
- Career guides by Science of Apps for 2027The best cybersecurity certifications of 2027: ten from first job to CISOThe 10 best cybersecurity certifications of 2027: CompTIA Security+, ISC2 CC, CISSP, CISM, CISA, CEH, Google Cybersecurity, CCNA and more, with fees.
- Career guides by Science of Apps for 2027The IT certification roadmap for 2027: from beginner to expertAn IT certification roadmap for 2027: Google IT Support or A+, Network+ or CCNA, Security+ or a cloud exam, CKA or ITIL, then CISSP.
- Career guides by Science of Apps for 2027The networking certification roadmap for 2027: from beginner to expertA networking certification roadmap for 2027: Google IT Support or A+, Network+, CCNA, then Security+ and AWS SAA.
- Career guides by Science of Apps for 2027The highest-paying cybersecurity certifications for 2027, from survey dataThe highest-paying cybersecurity certifications for 2027: CISSP, CISM, CISA, Security+, CEH and CCNA, with Skillsoft survey salary data and exam fees.
- Career guides by Science of Apps for 2027Top 5 cybersecurity certifications to get hired in 2027: the ones security job posts nameThe top 5 cybersecurity certifications to get hired in 2027: CompTIA Security+, CISSP, CEH, ISC2 CC and CISM, matched to security job titles.
- Career guides by Science of Apps for 2027Cybersecurity certifications for beginners: seven best for 2027 if you're starting from zeroThe 7 best cybersecurity certifications for beginners in 2027: Google Cybersecurity, ISC2 CC, CompTIA A+, Network+, Security+, Google IT Support and CCNA.
Get the ideas, not the noise.
Sign up with Google and we’ll send you short UX psychology tips by email — why people tap, stall and leave, and what to do about it. Unsubscribe anytime. Prefer something to keep? Get the free Laws of UX guide as a PDF.
Prove the skill before you pay for the exam.
Start with the free Cybersecurity Fundamentals Certification. 1,200+ free, test-based certifications graded on our server. Pass and get a founder-signed certificate with a credential ID employers can verify.